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AFFIDAVIT UNDER 37 C.F.R. 1.131 

STATE OF ARIZONA ) 
MARICOPA COUNTY ) 

I, Eric B. Remer, first being duly sworn, do hereby state that: 

1 . I am one of the inventors of the above-referenced patent application. 

2. I am an engineer for Intel Corporation, the assignee of the above- 
referenced patent application. 

3. Attached is a true copy of the original invention disclosure for this 
invention. This invention disclosure documents our invention. I prepared 
the invention disclosure on May 12, 1999. The invention disclosure 
establishes a date of conception of my invention no later than May 12, 
1999. This date is earlier than the effective date of the cited McDonough, 
et al., reference (US Patent No. 6,714,982), filed on January 19, 2000, 
and issued on March 30, 2004. 

4. The invention disclosure was submitted to the Intel legal department for 
jji3M<prGOessing/sfe6ordfig to Intel's normal business practices. 
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8oos for my invention was fi|ed 0n June 27 > 2000 » 

>m> m * + tn^e^/ esTabTTs Ring a date of constructive reduction to practice for the 



invention. 
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6. The invention disclosure was submitted to my manager Larry Larsen, for 
signature and approval on December 7, 1999, During the period from the 
date of submission of the invention disclosure on December 7, 1999, to 
the filing date of June 27, 2000, the invention disclosure was diligently 
processed by the inventors and other employees of Intel according to the 
normal business practices of Intel Corporation. 

7. The invention disclosure was received by the Intel patent database group 
on December 15, 1999. 

8. The invention disclosure was reviewed at a meeting of Intel Corporation's 
Software and Internet Intellectual Property (IP) Committee on February 9, 
2000. It was recommended for filing as a patent application and a patent 
docket file was opened for the patent application on March 15, 2000. 

9. During April, 2000, I met with Mr. Jay C. Chiu, a patent attorney of the 
firm Pillsbury, Madison and Sutro, LLP, a firm assigned by Intel to prepare 
the patent application, to discuss my invention. Subsequent to this time, I 
diligently worked with Mr. Chiu in providing information about the invention 
and in reviewing drafts of the patent application until filing of the 
application on June 27, 2000. 



Respectfully submitted, 





Eric B. Remer 



Sworn to and subscribed before me this IH day of February, 2005. 
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vV. - <' ■ 1 * . , INTEL CONFIDENTIAL 

Jv /«? T £7 INTEL INVENTION DISCLOSURE 

"DATE: Wednesday t May12,1999 ^^/Pifefe/^O DEC 1 3 1999 

It is important to provide accurate and detailed information on this form. The information will be used to evaluate 
your invention for possible filing as a patent application. When completed, please return this form to the Legal 
Department at JF3-147. If you have any questions, please call 264-0444 or 264-1476. 

Inventor: Remer Eric ■ EL 




Last Name First Name Middle Initial 

Phone __(801) 763-2337 M/S: _UT1 Fax # _(801) 756-8350 

Citizenship: _US WWID .10074001 

Home Address: 436 North 580 West City American Fork State _UT__ Zip ..84003 



Group: (e.g. TMG, NBG, CEG) NBG Division Name SMD Subdivision 

Supervlsor *_Lany Larsen WWID _10058342 Phone ^(801) 763-2815 M/S: _UT1_ 



nventor: _King • David A. 



Last Name First Name Middle Initial 

Phone (801)763-2838 M/S: _UT1 Fax# _(801) 756-8350 

Citizenship: US WWID ^10534659 

Home Address: _ 10833 North 5250 West City ^ Highland State ^UT_ Zip 84003 

Group: (e.g. TMG, NBG, CEG) NBG Division Name SMD ' Subdivision " 

Supervisor *_Eric Remer WWID _10074001 Phone , (801)763-2337 M/S: __UT1 

Inventor: ___Remer David L 



Last Name First Name Middle Initial 

Phone _(801) 763-2301 M/S: _UT1 Fax # ^(801)756-8350 

Citizenship: _US ; WWID _10077899 

Home Address: , 948 South 1590 West City Orem State _UT_ Zip 84058 

Group: (e.g. TMG, NBG, CEG) NBG ; Division Name __SMD Subdivision 



Supervisor *_Larry Larsen WWID 10058342 Phone (801)763-2815 M/S:_ UT1 



(PROVIDE SAME INFORMATION AS ABOVE FOR EACH ADDITIONAL INVENTOR) 

^2. Title of Invention: Supporting Multiple Encryption\Authenticaiton Schemes from a Source to Target Entities (i.e. computers) to 
establish a Connection over the Internet . 



3. What technology/product/process (code name) does it relate to (be specific if you can): 
Intel InBusiness Remote Services Center __ 



RECEIVED 



4. Stage of development (i.e. % complete, simulations done, test chips if any, etc.) nrn <« j- innfs 
_5%_(design) * vSS 

5. (a) Has a description of your invention been, or will it shortly be, published outside Intel: iwrtrl ^J^ASE GROUP 

1 EL LEGAL TEAM 

NO: X YES: If YES, was the manuscript submitted for pre-publication approval? , 



IDENTIFY THE PUBLICATION AND THE DATE PUBLISHED: 



(b) Has your invention been used/sold or planned to be used/sold by Intel or others? 

NO: YES: X DATE WAS OR WILL BE SOLD: Earliest would be late 2000 

(c) Does this invention relate to technology that is or will be covered by a SIG (special interest group)/standard/ 
or specification? 
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--•St INTEL CONFIDENTIAL 

NO: X YES: Name of SIG/Standard/Specification: ^ ______ 

(d) If the invention is embodied in a semiconductor device, actual or anticipated date of tapeout? _____ 



(e) If the invention is software, actual or anticipated date of any beta tests outside Intel Earliest in July 2000_ 

6. Was the invention conceived or constructed in collaboration with anyone other than an Intel blue badge employee 
or in performance of a project involving entities other than Intel, e.g. government, other companies, universities 
or consortia? NO: X YES: Name of individual or entity: 

7. Is this invention related to any other invention disclosure that you have recently submitted? If so, please give the title and 
inventors: Connecting to an Entity fie computer) Behind a Standard Firewall/Proxy^ 
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PLEASE READ AND FOLLOW THE DIRECTIONS ON 
HOW TO WRITE A DESCRIPTION OF YOUR INVENTION 

Please attach a page to this form, DATED AND SIGNED BY AT LEAST ONE PERSON WHO IS NOT A NAMED INVENTOR, to 
provide a description of the invention, and include the following information: 

1 . Describe in detail what the components of the invention are and how the invention works. 

This invention is an extension to the disclosure entitled Connecting to an Entity (i.e. computer) 
Behind a Standard Firewall/Proxy. The Connecting to an Entity (i.e. computer) Behind a Standard 
Firewall/Proxy disclosure describes an invention that allows a computer that is behind a firewall or 
proxy to be connected to an entity (i.e. computer) outside of a standard web firewall or proxy. The 
disclosure also explains that the invention relies on a third party trusted arbitrator available on the 
Internet. The invention described in this disclosure uses the same basic aspects of the above 
explained invention with a new service residing at the third party arbitrator referred to herein as 
the Arbitrator Encryption Service. 

It also uses a connection service that resides on the network behind the firewall/proxy referred to 
as the target network. This connection service may reside on a computer or a specialized 
appliance of some type. This connection service lives at the "Connection Entity" in the example 
diagram for purposes of clarity the name and platform that the connection service resides on is 
irrelevant to the invention. 

The invention allows the source and the target to use completely different encryption techniques 
to communicate with one another. The source computer contacts the encryption service and sets 

up a secure 
connection with 
encryption 
scheme A. The 
target computer 
also contacts the 
encryption 
service and sets 
up a secure 
connection with 
encryption 
scheme B. The 
encryption 
service will 

Source Computer decrypt and 

encrypt from one 
connection to 

another allowing the source computer to communicate securely with the target computer even 
when the two don't support the same encryption techniques. It is important to note that the 
encryption service must support either type of encryption scheme that the source or target 
require. It is also important to note that the source and target computers are required to 
authenticate with the arbitrator service before the secure connection can be established. Using 
the same concept described above the arbitrator service can support multiple authentication 
schemes for source and target computers. 
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■ ' INTEL CONFIDENTIAL 

2. Describe advantage(s) of your invention over what is done now. 

Currently computers that belong to a VPN would be required to use the same encryption scheme. 

3. YOU MUST include at least one figure illustrating the invention. If the invention relates to 
software, include a flowchart or pseudo-code representation of the algorithm. 



Source entity contacts 
arbitrator service and 
attempts to authenticate 




Arbitrator service will attempt to 
authenticate if desired 
authentication scheme is 
supported 


» 


Once authenticated source 

entity requests a secure 
connection using a particular 
encryption scheme 


» 





If a connection request Is 
connected the connection service 
attempts to authenticate with the 
arbitrator service 




The connection service 
on the target network 
peridocally checks for 
connection requests 


< 


If the encryption service 
supports the encryption 

scheme the secure 
connection is established 


< 





Arbitrator service will attempt to 
authenticate if desired 
authentication scheme is 
supported 




Once authenticated target 
connection service request a 

secure connection using a 
particular encryption scheme 


» 


If the encryption service 
supports the encryption 

scheme the secure 
connection is established 


p. 





; 

Once both connections are establish the arbitrator 
service will virtually connect the two allowing secure 
connectivity between the source and target entities 
both of which are behind two different firewalls 



4. Value of your invention to Intel (how will it be used?). 

It will be used in Intel InBusiness Remote Services Center to allow a customer to manage entities 
(i.e. computers) behind a firewall securely. It could also be used for general-purpose 
communications between computers behind different firewalls. 

5. Identify the closest or most pertinent prior art that you are aware of. 
Not aware of any currently. 

6. Who is likely to want to use this invention or infringe the patent if one is obtained and how 
would infringement be detected? 

Anyone in need of handling multiple encryption types between source and target entities 
(computers) behind a firewall 

♦HAVE YOUR SUPERVISOR READ, DATE AND SIGN COMPLETED FORM 

DATE: SUPERVISOR: >0^^^^^^ 

BY THIS SIGNING, I (SUPERVISOR) ACKNOWLEDGE TH&Pi HAVE READ AND 
UNDERSTAND THIS DISCLOSURE, AND RECOMMEND THAT THE HONORARIUM BE PAID 
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